JIRA Cloud Data Encryption and Client Key Support

[Eric Chiu]

Apart from encryption in transit, does JIRA Cloud support encryption at rest?  If using AWS S3 for storage, what kind of data encryption is applied?  Does it support client key?

[lauren · Accepted solution]

Hi @Eric Chiu

I'm excited to share an update on our data encryption! We recently announced that Atlassian now encrypts customer data in transit and at rest.

Data drives on servers holding customer data and attachments in Jira Software Cloud, Jira Service Desk Cloud, Jira Core Cloud, Confluence Cloud, Statuspage, OpsGenie, and Trello use full disk, industry-standard AES-256 encryption at rest. To learn more, please see our Security Practices page.

We post updates related to security, privacy, compliance, and more in our Trust & Security group. Feel free to post related questions and feedback there! 

Best,

Lauren

[Andy Heinzer]

Hi Eric,

As of today, Jira Cloud does NOT encrypt this data at rest.  There is an existing feature request for this in https://jira.atlassian.com/browse/JRACLOUD-71551

You can see this is documented in the SOC2 certifications which you can download from https://www.atlassian.com/trust/compliance

This page requires you to enter your email address and agree to the legal terms of that page.  However within that document it does state that Jira Cloud does not encrypt it's data at rest.  It does encrypt in transit.

Andy